CVE-2014-2129

The SIP inspection engine in Cisco Adaptive Security Appliance ASA Software 8.2 before 8.25.48, 8.4 before 8.46.5, 9.0 before 9.03.1, and 9.1 before 9.12.5 allows remote attackers to cause a denial of service memory consumption or device reload via crafted SIP packets, aka Bug ID CSCuh44052...

CVE-2014-2126

Cisco Adaptive Security Appliance ASA Software 8.2 before 8.25.47, 8.4 before 8.47.5, 8.7 before 8.71.11, 9.0 before 9.03.10, and 9.1 before 9.13.4 allows remote authenticated users to gain privileges by leveraging level-0 ASDM access, aka Bug ID CSCuj33496...

CVE-2014-2127

Cisco Adaptive Security Appliance ASA Software 8.x before 8.25.48, 8.3 before 8.32.40, 8.4 before 8.47.9, 8.6 before 8.61.13, 9.0 before 9.04.1, and 9.1 before 9.14.3 does not properly process management-session information during privilege validation for SSL VPN portal connections, which allows...

Authentication flaw

The SSL VPN implementation in Cisco Adaptive Security Appliance ASA Software 8.2 before 8.25.47, 8.3 before 8.32.40, 8.4 before 8.47.3, 8.6 before 8.61.13, 9.0 before 9.03.8, and 9.1 before 9.13.2 allows remote attackers to bypass authentication via 1 a crafted cookie value within modified HTTP...

Information disclosure

Cisco Adaptive Security Appliance ASA Software 8.x before 8.25.48, 8.3 before 8.32.40, 8.4 before 8.47.9, 8.6 before 8.61.13, 9.0 before 9.04.1, and 9.1 before 9.14.3 does not properly process management-session information during privilege validation for SSL VPN portal connections, which allows...

Code injection

Cisco Adaptive Security Appliance ASA Software 8.2 before 8.25.47, 8.4 before 8.47.5, 8.7 before 8.71.11, 9.0 before 9.03.10, and 9.1 before 9.13.4 allows remote authenticated users to gain privileges by leveraging level-0 ASDM access, aka Bug ID CSCuj33496...

CVE-2014-2128

The SSL VPN implementation in Cisco Adaptive Security Appliance ASA Software 8.2 before 8.25.47, 8.3 before 8.32.40, 8.4 before 8.47.3, 8.6 before 8.61.13, 9.0 before 9.03.8, and 9.1 before 9.13.2 allows remote attackers to bypass authentication via 1 a crafted cookie value within modified HTTP...

CVE-2014-2127

CVE-2014-2127 affects Cisco ASA SSL VPN privilege escalation via improper handling of management-session information during privilege validation in SSL VPN portal connections. A remote authenticated user can gain privileges by establishing a Clientless SSL VPN session and supplying crafted URLs. ...

CVE-2014-2129

CVE-2014-2129 affects Cisco ASA Software SIP inspection engine. Affected versions are ASA 8.2 before 8.2(5.48), 8.4 before 8.4(6.5), 9.0 before 9.0(3.1), and 9.1 before 9.1(2.5). The vulnerability allows remote attackers to trigger a denial of service via crafted SIP packets, leading to memory ex...

CVE-2014-2126

Cisco Adaptive Security Appliance ASA Software 8.2 before 8.25.47, 8.4 before 8.47.5, 8.7 before 8.71.11, 9.0 before 9.03.10, and 9.1 before 9.13.4 allows remote authenticated users to gain privileges by leveraging level-0 ASDM access, aka Bug ID CSCuj33496...

CVE-2014-2127

Cisco Adaptive Security Appliance ASA Software 8.x before 8.25.48, 8.3 before 8.32.40, 8.4 before 8.47.9, 8.6 before 8.61.13, 9.0 before 9.04.1, and 9.1 before 9.14.3 does not properly process management-session information during privilege validation for SSL VPN portal connections, which allows...

CVE-2014-2128

Cisco ASA SSL VPN Authentication Bypass (CVE-2014-2128) affects ASA Software versions 8.2 before 8.2(5.47), 8.3 before 8.3(2.40), 8.4 before 8.4(7.3), 8.6 before 8.6(1.13), 9.0 before 9.0(3.8), and 9.1 before 9.1(3.2). Root cause: improper handling of authentication cookies and crafted URLs allow...

CVE-2014-2126

CVE-2014-2126 affects Cisco ASA family: ASA Software versions 8.2 before 8.2(5.47), 8.4 before 8.4(7.5), 8.7 before 8.7(1.11), 9.0 before 9.0(3.10), and 9.1 before 9.1(3.4) allow remote authenticated users to gain privileges via level-0 ASDM access (ASDM Privilege Escalation). Root cause involves...

Multiple Vulnerabilities in Cisco ASA Software

Cisco Adaptive Security Appliance ASA Software is affected by the following vulnerabilities: Cisco ASA ASDM Privilege Escalation Vulnerability Cisco ASA SSL VPN Privilege Escalation Vulnerability Cisco ASA SSL VPN Authentication Bypass Vulnerability Cisco ASA SIP Denial of Service Vulnerability...

Cisco ASA SSL VPN Privilege Escalation Vulnerability

This module exploits a privilege escalation vulnerability for Cisco ASA SSL VPN aka: WebVPN. It allows level 0 users to escalate to level 15. Module Options msf use auxiliary/scanner/http/cisco/sslvpnprivesc msf undefinedsslvpnprivesc show actions ...actions... msf undefinedsslvpnprivesc set ACTI...

Cisco Prime Security Manager跨站脚本漏洞

BUGTRAQ ID: 66488 CVECAN ID: CVE-2014-2118 Cisco Prime Security Manager是集中管理Cisco ASA 5500-X系列防火墙的工具。 Cisco Prime Security Manager 即PRSM 9.2.1-2及之前版本在仪表盘相关的HTML文档内存在多个跨站脚本漏洞，这可使远程攻击者注入远程Web脚本或HTML。 0 Cisco Prime Security Manager 9.2.1-2 目前厂商还没有提供补丁或者升级程序： http://www.cisco.com/go/psirt...

CVE-2014-2120

Cross-site scripting XSS vulnerability in the WebVPN login page in Cisco Adaptive Security Appliance ASA Software allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCun19025...

CVE-2014-2120

Cross-site scripting XSS vulnerability in the WebVPN login page in Cisco Adaptive Security Appliance ASA Software allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCun19025...

CVE-2014-2120

Cross-site scripting XSS vulnerability in the WebVPN login page in Cisco Adaptive Security Appliance ASA Software allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCun19025...

CVE-2014-2120

CVE-2014-2120 affects Cisco ASA WebVPN login page, with a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary script/HTML via an unspecified parameter (Bug ID CSCun19025). Multiple sources (Cisco advisory, NVD/NIST CVE entry, CISCO-SA, OpenVAS) consistently d...